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Amendments to the Claims 

Please amend claims to be as follows. 

1 . (currently amended) A method for remote mirroring of network traffic 

between a first network layer 2 domain and a second network layer 2 domain , 
the method comprising: 

receiving by an entry device a data packet to be remotely mirrored by an 
e ntry d e v i ce from the first network layer 2 domain, wherein the 
entry device is pre-configured with a destination Internet Protocol 
(IP) address to which to mirror the data packe t and the destination 
IP address is associated with a remote exit device in the second 
network layer 2 domain ; 
generating and adding an IP header to IP encapsulate the data packet, 
wherein the IP header includes the destination IP address; and 
forwarding the IP-encapsulated packet to an exit device associated with 
the destination IP address. 



2. (currently amended) The method of claim 1, further comprising: 

determining a media access control (MAC) address associated with the 

destination IP address; 
generating and adding a MAC header to the IP-encapsulated packet to 

form a MAC data frame, wherein the MAC header includes the 

MAC address in a destination field; and 
transmitting the MAC data frame to communicate the IP-encapsulated 

packet across [[a]] the second network layer 2 domain to the 

remote exit device. 



3. 



(original) The method of claim 2, wherein determining the MAC address 
comprises: 
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determining if a mapping of the destination IP address to the MAC 

address is stored in an address resolution protocol (ARP) cache; 
if so, then retrieving the MAC address from the ARP cache; and 
if not, then broadcasting an ARP request with the destination IP address 
and receiving an ARP reply with the MAC address. 

4. (original) The method of claim 2, wherein the IP-encapsulated packet is 
communicated across at least one intermediate layer 2 domain. 

5. (original) The method of claim 1, further comprising: 

receiving the IP-encapsulated packet by the exit device; and 
removing the IP header to de-encapsulate the packet. 

6. (original) The method of claim 1 , wherein the remote mirroring preserves an 
original format of the data packet. 

7. (original) The method of claim 1, further comprising: 

pre-configuring the entry device to mirror data packets from at least one 
specified port of the entry device. 

8. (original) The method of claim 1 , further comprising: 

pre-configuring the entry device to mirror data packets which include a 
VLAN tag with at least one specified VLAN identifier, 

9. (original) The method of claim 1 , further comprising: 

pre-configuring the entry device to mirror data packets which include MAC 
addresses that matches at least one entry in a MAC look-up table. 
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10. (original) The method of claim 1, further comprising: 

pre-configuring the entry device to mirror data packets which include IP 
addresses that matches at least one entry in an IP hash table. 



11. (original) The method of claim 1, further comprising: 

pre-configuring the entry device to mirror data packets which include an 
IP destination address that matches at least one specified subnet 
entry in a best matching prefix (BMP) table. 

12. (original) The method of claim 1, further comprising: 

pre-configuring the entry device to mirror data packets matching at least 
one access control list (ACL) entry. 

13. (original) The method of claim 1, further comprising: 

configuring the entry device in a best effort mirroring mode to reduce 
head-of-line blocking. 

14. (original) The method of claim 1, further comprising: 

configuring the entry device in a lossless mirroring mode to assure 
completeness of mirrored traffic. 

15. (original) The method of claim 1, further comprising: 

truncating the data packet to reduce a size of the IP-encapsulated packet 
prior to forwarding thereof. 

16. (original) The method of claim 1, further comprising: 
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compressing at least a portion of the data packet to reduce a size of the 
IP-encapsulated packet prior to forwarding thereof. 

17. (original) The method of claim 1, further comprising: 

encrypting at least a portion of the data packet to provide a level of 
security prior to forwarding the IP-encapsulated packet. 

18. (currently amended) A networking device configured with a mirroring 
capability to a remote exit device in a different network layer 2 domain, the 
networking device comprising: 

a plurality of ports for receiving and transmitting packets therefrom; 

a switching/routing engine coupled to the ports for transferring the packets 
therebetween; and 

a remote mirroring engine configured to detect packets from a specified 
mirror source, IP-encapsulate the detected packets with an internet 
protocol (IP) header , and forward the IP-encapsulated packets 
to wards an IP destination by way of at least one of the ports. 

19. (original) The networking device of claim 18, wherein the specified mirror 
source comprises at least one of said ports. 

20. (original) The networking device of claim 18, wherein the specified mirror 
source comprises at least one specified VLAN. 

21. (original) The networking device of claim 18, wherein the specified mirror 
source comprises those packets matching entries in a look-up table. 
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22. (original) The networking device of claim 18, wherein the specified mirror 
source comprises at least one specified subnet. 

23. (original) The networking device of claim 18, wherein the specified mirror 
source comprises those packets matching entries in an access control list. 

24. (original) The networking device of claim 18, wherein the device includes a 
best effort mirroring mode to reduce head-of-line blocking. 

25. (original) The networking device of claim 18, wherein the device includes a 
lossless mirroring mode to assure completeness of mirrored traffic. 

26. (original) The networking device of claim 18, wherein the device truncates 
the data packet to result in a size reduction of the IP-encapsulated packet 
prior to forwarding thereof. 

27. (original) The networking device of claim 18, wherein the device 
compresses at least a portion of the data packet to result in a size reduction 
of the IP-encapsulated packet prior to forwarding thereof. 

28. (original) The networking device of claim 18, wherein the device encrypts at 
least a portion of the data packet to provide a level of security prior to 
forwarding the IP-encapsulated packet. 

29. (currently amended) An apparatus for remote mirroring of network traffic 
between a local network layer 2 domain and a remote network layer 2 
domain , the m e thod apparatus comprising: 
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m e ans for r e c ei v i ng an entry device configured to receive from the local 
network layer 2 domain a data packet to be remotely mirrored to a 
remote exit device in the remote network layer 2 domain; -W-an 
entry device pre configured w i th 

a configuration file in the entry device, where the configuration file stores 
a destination Internet Protocol (IP) address to which to mirror the 
data packet; 

[[means]] a remote mirroring engine for generating and adding an IP 

header to IP encapsulate the data packet, wherein the IP header 
includes the destination IP addressfHIl , for reducing size of the data 
packet to accommodate the added IP header and [[means]] for 
forward i ng having the IP-encapsulated packet [[to an]] forwarded 
towards a remote exit device associated with the destination IP 
address. 
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